Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/34352e3138392e36302e302f32322d3234203d3e20323635363230.roa
File: 34352e3138392e36302e302f32322d3234203d3e20323635363230.roa (raw, json)
Hash identifier: qXwhGC74DvKRrsAJ+ThSIZ0LVOUni4eVsQnzdcZAp74=
Subject key identifier: FE:D5:F1:74:94:9B:83:7B:53:84:B7:54:6B:5D:A2:31:15:87:8E:86
Certificate issuer: /CN=58C76DEB05E1657B955AB41355B108825D2D69BC
Certificate serial: 3E725D49ABA761A2B44CF6A7E2D9B480EF4BEFCE
Authority key identifier: 58:C7:6D:EB:05:E1:65:7B:95:5A:B4:13:55:B1:08:82:5D:2D:69:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/58C76DEB05E1657B955AB41355B108825D2D69BC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/34352e3138392e36302e302f32322d3234203d3e20323635363230.roa
Signing time: Tue 04 Feb 2025 20:08:59 +0000
ROA not before: Tue 04 Feb 2025 20:03:59 +0000
ROA not after: Tue 03 Feb 2026 20:08:59 +0000
asID: 265620
IP address blocks: 45.189.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/58C76DEB05E1657B955AB41355B108825D2D69BC.crl
rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/58C76DEB05E1657B955AB41355B108825D2D69BC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/58C76DEB05E1657B955AB41355B108825D2D69BC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 15:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:72:5d:49:ab:a7:61:a2:b4:4c:f6:a7:e2:d9:b4:80:ef:4b:ef:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C76DEB05E1657B955AB41355B108825D2D69BC
Validity
Not Before: Feb 4 20:03:59 2025 GMT
Not After : Feb 3 20:08:59 2026 GMT
Subject: CN=FED5F174949B837B5384B7546B5DA23115878E86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4b:56:f8:9e:55:c1:e2:e5:0c:8c:1a:6f:27:
df:a0:b9:d8:18:c6:0c:d9:da:a1:15:55:b1:80:12:
b0:2f:2c:b4:02:a4:43:8e:66:1e:ee:2d:fb:ee:e3:
75:ad:f2:29:1a:38:09:0f:1a:d3:30:82:1b:2a:3c:
48:aa:d6:18:81:61:46:7a:fb:a0:75:db:e7:c2:fb:
3d:a1:e7:77:28:bd:f3:9d:89:35:9b:23:29:c7:f7:
3e:b6:f5:78:1e:6e:74:99:cc:85:2a:74:c5:7a:bb:
28:ab:c3:ee:cd:b5:c2:08:0d:18:01:32:8c:ee:64:
4f:60:32:7b:e2:6e:22:ab:c3:06:50:c9:b6:17:b4:
91:d6:b4:60:41:d0:2d:31:4c:af:c4:1e:ff:a8:46:
62:6a:eb:fc:1a:89:43:45:87:07:7c:21:e4:ae:ea:
bf:d8:ee:0d:d8:d6:a5:9c:d4:6b:1c:52:df:d0:bd:
ea:dd:6e:8f:01:3e:45:a3:a9:f2:b7:54:ae:9c:2d:
56:07:2e:eb:16:d4:e8:8c:fa:2a:cf:c0:3b:23:8f:
eb:dd:7f:53:64:24:3a:3d:bf:cd:f6:75:ad:38:6b:
a5:0e:8a:70:bc:84:9f:dd:91:40:95:8f:da:63:17:
70:eb:f2:20:b7:2f:44:71:1d:b4:16:4f:22:6c:e6:
c2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D5:F1:74:94:9B:83:7B:53:84:B7:54:6B:5D:A2:31:15:87:8E:86
X509v3 Authority Key Identifier:
keyid:58:C7:6D:EB:05:E1:65:7B:95:5A:B4:13:55:B1:08:82:5D:2D:69:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/58C76DEB05E1657B955AB41355B108825D2D69BC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/58C76DEB05E1657B955AB41355B108825D2D69BC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/34352e3138392e36302e302f32322d3234203d3e20323635363230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.60.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:32:a0:81:42:80:f0:8b:35:cd:86:b0:64:66:97:b4:52:60:
a9:c9:96:62:3f:72:5b:ba:47:83:fb:72:67:2a:f3:68:79:6b:
d9:22:ca:f7:70:4c:e8:e6:f9:32:76:77:53:07:af:53:18:03:
89:2d:fc:9d:0c:f9:32:c1:b5:33:cb:d3:f5:78:0f:29:06:56:
6b:59:ba:cd:79:2a:cb:9c:4b:f7:df:e7:c1:45:06:16:35:2f:
ea:40:b4:55:41:44:af:0f:bc:bf:1b:a4:e6:09:57:a1:3e:89:
44:d0:73:b4:ed:a5:c0:44:e5:a1:2a:58:6e:06:1e:3a:75:ac:
e7:5b:52:53:79:1c:2b:d2:48:03:de:27:f1:87:39:79:6d:97:
c6:ba:1b:8a:ad:08:9f:72:d0:12:b8:35:e6:3a:ab:b4:7c:b0:
9b:cc:05:1d:67:4f:02:cb:a7:a9:70:db:98:73:5e:e8:df:5b:
08:1a:0b:c6:a8:e2:69:9f:ba:5d:41:c0:ec:eb:7e:66:99:05:
3b:9b:b7:db:7e:ea:9b:8d:58:d5:f0:83:2e:67:b6:12:b8:b0:
59:26:66:e2:d6:8a:7b:18:f2:ab:cd:fa:2b:3b:90:78:d6:83:
f4:4e:8f:66:6b:f5:96:93:6c:9f:f7:38:8f:13:40:7e:75:10:
de:50:5d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:28:09 2025 by rpki-client